Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7A2C74BDBA11EF9378974D762E951A.roa
File: 9E7A2C74BDBA11EF9378974D762E951A.roa (raw, json)
Hash identifier: 8sgkyLBd5ws2uKRSkRfRXhPpzDS7nbxwlfRYhUwM1u0=
Subject key identifier: 5E:22:3F:CF:94:C3:8E:8A:F3:9E:3F:04:FB:DF:FE:A9:A3:47:26:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E52B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7A2C74BDBA11EF9378974D762E951A.roa
Signing time: Thu 19 Dec 2024 03:37:49 +0000
ROA not before: Thu 19 Dec 2024 03:37:46 +0000
ROA not after: Wed 10 Dec 2025 03:37:46 +0000
asID: 984
IP address blocks: 45.204.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58667 (0xe52b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:37:46 2024 GMT
Not After : Dec 10 03:37:46 2025 GMT
Subject: CN=6763950d-ae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:50:5b:17:ce:3f:f9:35:36:4f:9d:40:0f:
36:42:5e:2e:5a:9f:c6:8f:51:c7:80:5c:62:36:b5:
26:5c:03:17:22:91:11:f5:a8:b2:9b:9f:3d:5d:0b:
f6:eb:af:34:ea:a6:7e:8a:38:8b:6e:91:4a:79:91:
73:14:40:62:06:9d:85:ae:49:4d:73:a2:74:d6:c6:
89:e3:23:37:38:96:ef:97:38:f0:b2:e4:7d:ca:9c:
09:cb:b9:25:97:1d:e2:71:dd:df:ce:39:1a:79:de:
ca:72:9c:5f:2f:f5:43:ca:01:3d:2a:43:e4:37:91:
bc:bd:4c:7d:50:91:6e:75:06:a3:65:55:98:a9:cb:
b2:0d:bc:ae:7d:27:5c:62:09:01:a9:4e:a5:70:60:
a4:69:d1:59:9a:df:fd:66:2f:1f:36:f7:05:10:58:
5b:b0:be:e4:c7:71:fd:eb:71:26:eb:77:bd:c9:3b:
0c:f0:ed:a6:d4:4f:bf:65:08:75:20:f2:7a:58:70:
b0:7f:6d:66:20:c1:9e:c5:88:fa:7f:00:2b:54:c6:
96:5e:ed:cc:8d:43:1f:0d:c8:d9:f8:c8:5e:6d:2a:
73:ff:37:3d:4c:84:a0:6d:ac:67:3a:7a:c3:72:80:
42:9c:20:5b:f7:f6:1a:f1:0a:18:c2:99:66:0f:b5:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:22:3F:CF:94:C3:8E:8A:F3:9E:3F:04:FB:DF:FE:A9:A3:47:26:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7A2C74BDBA11EF9378974D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.251.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e1:4d:8e:34:4f:47:83:97:49:99:1f:b5:8d:85:95:f6:30:
fb:09:e0:fc:94:ec:85:5f:ec:f2:86:4d:10:00:45:c5:55:6d:
04:6b:cb:fe:fc:f1:52:19:62:57:a7:91:bc:e4:ed:b7:c3:43:
0b:d2:04:13:39:23:e9:97:2d:c8:80:e6:78:6b:7c:7a:fb:36:
f7:57:16:9d:ef:9b:ae:40:fc:1b:b1:48:2c:dd:30:cd:2b:98:
fa:af:24:ca:77:43:08:cd:26:28:61:9f:df:11:8b:cb:6f:bc:
16:a5:bb:51:ac:5c:9a:2b:45:13:e9:f2:e1:15:44:05:31:4f:
e6:ee:4b:38:6d:69:c9:7f:9b:91:d0:de:a5:73:2c:f6:c6:b4:
d6:54:c1:33:af:8a:8b:94:c3:6f:64:b7:e7:a9:cc:f6:b0:28:
10:13:e1:68:c5:8f:d3:b9:a8:8e:db:78:d6:0d:09:41:5b:34:
fc:e9:1d:06:34:9d:93:bb:c3:2e:f5:71:91:f5:13:4f:be:69:
3a:c9:e7:f8:13:cf:a4:41:f8:05:a6:ca:ce:2b:b4:94:c9:cd:
8c:d8:69:0e:f9:cf:62:8c:0e:ab:06:a4:0c:c1:4a:58:3d:bd:
a2:72:45:7f:09:a5:90:d5:7a:c6:22:5f:fa:89:77:b4:a1:cc:
6e:66:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:59 2025 by rpki-client